Cybersecurity · 24 views
New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots
Cybersecurity researchers have flagged a new version of the TrickMo Android banking trojan that uses The Open Network (TON) for command-and-control (C2).
Summary
Cybersecurity researchers have flagged a new version of the TrickMo Android banking trojan that uses The Open Network (TON) for command-and-control (C2). The new variant, observed by ThreatFabric between January and February 2026, has been observed actively targeting banking and cryptocurrency wallet users in France, Italy, and Austria.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedMore from Cybersecurity
Continue reading recent Cybersecurity coverage
- Party’s Over for Crypto Scammers Who Went on a Spending Spree After a $240 Million Bitcoin TheftContinue reading
- Webinar: The forgotten Google Workspace access that can lead to a breachContinue reading
- Hackers build AI frameworks for widescale credential theftContinue reading
- WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming CallsContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow